J. Wolfgang Kaltz wrote:

Jann Forrer schrieb:

(...)
I did try to do this starting with a simple example i.e. a listener which
only counts the active sessions. This works quite well now but i noted
that a logut did not invalidate the session (meaning that if a user did
log out i still had the same number of sessions).
The reason is that session.invalidate(); is not called in logout.xsp. If
i add it to login.xsp:


<xsp:content><uri><xsp-request:get-context-path/><xsp:expr>uri</xsp:expr></uri></xsp:content>

         }
       }
+      session.invalidate();
     }
   </xsp:logic>
 </logout>

i got the proper number of sessions. Is this a bug or is
session.invalidate not called on purpose?


IMO it makes sense to explicitly call session.invalidate() on logout.


me too. I think Andreas implemented this, maybe he can say if this was just
forgotten of if there is another reason for this.

Otherwise I would suggest that we implement this.


Note that in any case the session will be invalidated upon session timeout, so your listener would still be notified even if logout did not call invalidate. It's just that the notification happens later.


right, but this might take some time (depending on the configuration ;-)

Michi



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




--
Michael Wechner
Wyona Inc.  -   Open Source Content Management   -   Apache Lenya
http://www.wyona.com                      http://lenya.apache.org
[EMAIL PROTECTED]                        [EMAIL PROTECTED]


--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]



Reply via email to